Job DescriptionDirector of Enterprise Risk Management (Hybrid - Columbia, SC)
The
Director of Enterprise Risk Management leads the execution and ongoing enhancement of the Bank's Enterprise Risk Management (ERM) Framework under the strategic direction of the Chief Risk Officer. This role translates enterprise risk strategy into practical programs, processes, governance practices, and reporting that support the identification, assessment, monitoring, aggregation, and communication of risk across the organization. The Director partners with leaders across the Bank to provide timely, actionable insight into the risk profile and emerging risks, constructively challenge risk management practices, and advance risk capabilities in a manner that is appropriately tailored to AgFirst's business model, mission, regulatory environment, and evolving maturity.
What You'll DoEnterprise Risk Governance, Framework & Risk Appetite
- Lead the execution and ongoing enhancement of the Enterprise Risk Management Framework and governance model in alignment with direction established by the Chief Risk Officer, organizational objectives, and regulatory expectations.
- Administer and support implementation of the Enterprise Risk Management Framework, Enterprise Risk Management Policy, Risk Appetite Framework, and supporting standards, recommending practical enhancements as the organization evolves.
- Manage enterprise risk governance processes, including management and Board risk committee support, risk escalation protocols, policy governance, and preparation of risk reporting.
- Provide analysis and recommendations to the Chief Risk Officer and senior leadership regarding the Bank's risk profile, performance against Board-approved risk appetite limits and management-established thresholds, key risk exposures, and matters that may affect strategic objectives.
- Advance enterprise risk capabilities, methodologies, reporting practices, and governance processes through proportionate, practical improvements appropriate to AgFirst's business model and evolving risk maturity.
Enterprise Risk Profile, Risk Identification & Strategic Risk Oversight
- Lead the coordinated process for identifying, assessing, aggregating, and monitoring risks that may affect the Bank's strategic, operational, financial, and regulatory objectives.
- Manage development and maintenance of the enterprise risk profile, including top risks, emerging risks, interconnected risks, and enterprise risk trends.
- Support the design, implementation, and monitoring of Board-approved risk appetite limits, management-established thresholds, and reporting mechanisms that provide meaningful insight into risk exposures and performance.
- Develop management and Board risk reporting for review by the Chief Risk Officer, translating complex risk information into clear, actionable insights that support informed decision-making and effective oversight.
Enterprise Risk Management Programs
- Coordinate and support the ongoing effectiveness of enterprise risk programs, including Risk and Control Self-Assessments (RCSAs), issue management, incident management, business resiliency, Third-Party Risk Management (TPRM), and enterprise control governance activities.
- Develop and maintain consistent, practical methodologies for risk assessments, control evaluation, issue remediation, business resiliency planning, and TPRM execution, subject to governance and approval requirements.
- Assess risk mitigation strategies, control environments, business resiliency capabilities, and enterprise risk programs; identify gaps and recommend improvements that strengthen accountability, transparency, and organizational resilience.
- Ensure significant risks, control deficiencies, third-party concerns, business resiliency gaps, operational loss events, issues, and remediation activities are appropriately escalated, monitored, and communicated through established governance channels.
People & Talent Management
- Leads, coaches, and develops team members, fostering a culture of accountability, collaboration, and continuous improvement.
- Establishes goals, priorities, and performance expectations for the team.
- Supports talent development and succession planning efforts within the department.
- Allocates resources and workload to support achievement of departmental objectives.
- Builds effective partnerships across business units and lines of defense.
What You'll Need- Bachelor's degree in Risk Management, Finance, Economics, Accounting, Business Administration, or a related field required and a Master's degree preferred.
- 7-9 years of progressive experience in enterprise risk management, operational risk management, audit, compliance, financial services risk management, or related disciplines.
- 4-6 years of experience presenting risk matters to senior leadership, governance committees, or regulators.
- 4-6 years of leadership experience managing teams, complex programs, or cross-functional initiatives.
- 4-6 years of experience developing, implementing, or enhancing enterprise risk frameworks or related risk programs within a regulated organization.
- 1-3 years of experience implementing or enhancing Governance, Risk, and Compliance (GRC) platforms, data solutions, or risk reporting capabilities.
- Ability to establish and advance enterprise risk management frameworks, governance structures, and risk management practices that align with organizational strategy and regulatory expectations.
- Ability to evaluate, aggregate, and communicate enterprise-wide risks, including strategic, operational, emerging, and interconnected risks, to the Chief Risk Officer, senior leadership, and governance committees.
- Ability to develop and oversee risk appetite frameworks, risk metrics, and reporting processes that support informed decision-making and effective risk oversight.
- Ability to provide independent challenge, influence strategic decisions, and build consensus among senior leaders on complex risk-related matters.
- Ability to coordinate and enhance enterprise risk programs, including operational risk, business resiliency, RCSA, issue management, control governance, and third-party risk management activities, while recognizing when escalation or additional expertise is needed.
- Ability to develop concise communications for senior leadership and governance committees that translate complex risk information into clear, actionable business insights.
